a client d 



16. (Amended) A method as claimed in Claim 15 wherein: 



rects a service request to a first server which is to provide the requested 



service; 



the first 



server checks the service request for a session identifier and only services 
a service request having a valid session identifier, and where the service request has no 
valid identifier: 

tl e first server redirects the service request from the client to the 
[authorization] i uthentication server; 

t le [authorization] authentication server subjects the client to [the] an 
authorization ro itine and issues the session identifier to be appended to the service 
request to the fii st server; 

tie client forwards the service request appended with the session identifier 
to the first serve r; and 

the first server recognizes the session identifier and services the service 
request to the client; and 

the client appends the session identifier to subsequent service requests to the 
server system an i is serviced without further authorization. 



24. (Amended) A method as claimed in Claim [1] 2 wherein a service request is for a 

document and the session identifier includes a user identification, further comprising: 

returning the requested document wherein the document is customized for a 
particular user based on the user identification of the session identifier. 



25. (Amended) A method as claimed in Claim [1] 1 wherein a service request is for a 
document which has been purchased by a user, the session identifier comprises an 
authorization identifier, and further comprising: 

returning the requested document if the authorization identifier indicates that the 
user is authorized to access the document. 



(Amended) A method as claimed in Claim [1] 2 wherein a service request is for a 
document wherein the session identifier comprises a user identifier, and further 
comprising: 
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returning the requested document to the client; and 
charging the user identified in the identifier for access to the document. 

27. (Amended) A method of processing service requests from a client to a server system 

through a network, said method comprising the step/of: 

appending a session identifier to the [request] requests ; and 
responding to requests for documents received from the client through the 

network by returning the requested documents wherein the documents are customized for 

a particular user based on a user profile. 



28. (Amended) A method of processing/ervice requests from a client to a server system 
through a network, said method comprising the steps of: 

[responding to a request/or a document received from the client through the 
network;] 

appending a session^ identifier, vmich/ncludes a user identification, to [the] a 
request for a document ; ind 

returning the requested docun/enUvhgfein the document is customized for a 
particular user based on the user identification of the session identifier. 




29. (Amended) A'method of processing service requests from a client to a server system 
through a network, said method comprising the steps of: 

spending a session identifier to the [request] requests ; 
responding to requests for information received from the client through the 
nej^ork by returning the requested information to the client; and 

counting requests to particular information exclusive of repeated requests from a 
common client. 



(Amended) A method of processing^ service request [requests] for a document received 
from a client through a network ir^which thejjocument has been purchased by a user, 
said method comprising the stej^s of: 

[responding to a request for a docdment^beived from a client through the 
network in which the docjmient has been ptrfchased by the user;] 



appending an authori^ioiridentifier to the request; and 

returning the r^^ested (Jocuqient if the authorization identifier indicates that the 
user is authorized^ 



(Amended) A method of processing a s^ice request for a document [requests] from a 
client to a server system through a^tjyork, said method comprising the steps of: 
[responding to a recme^t for f document received from a client through the 
network;] 

appending^session identifier designated by the server system to the request; 
retupring the requested document to the clientf,]; and[;] 
larging the user identified in the session identifier for access to the document. 
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(Amended) An information system on a network, comprising: 

means for receiving service requests from clients and for determining whether a 
service request inch des a session identifier , wherein communications to and from the 
clients are according to hypertext transfer protocol ; 



means for providing the session identifier in response to an initial service request 
in a session of requests; and 

means for servicing service requests from a client which include the session 
identifier, the subsequent service request being processed in the session. 



Please add the following new claims 49-95: 



The method of Claim 3 wherein the session identifier is cryptographically generated. 

The method of Claim 3 further comprising: 

returning a REDIRECT to the client, the REDIRECT containing a locator for an 
authen ication server, the authentication server providing the session identifier. 



The method of Claim 3, wherein the session identifier is appended to at least one path 
name in a document returned by the server system. 
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52. The method of Claim 5 1 , wherein the at least one path name is in a link in the returned 
document. 

53. The method of Claim 52 wherein the link is an absolute link. 

54. The method of Claim 52 wherein the link comprises a uniform resource locator. 

55. The method of Claim 51 wherein the step of appending the session identifier comprises 
filtering the requested document. 

56. The method of Claim 51 wherein the session identifier is cryptographically generated. 

57. The method of Claim 51 wherein the session identifier is directed to an accessible 
domain. 

58. The method of Claim 51 wherein the session identifier comprises an expiration time. 

59. The method of Claim 51 wherein the session identifier comprises a date. 

60. The method of Claim 51 wherein the session identifier comprises a key identifier. 

61. The method of Claim 51 wherein the session identifier comprises an address of the client. 

62. The method of Claim 5 1 wherein the session identifier comprises a digital signature. 

63. The method of Claim 31 wherein the authorization identifier is provided by an 
authentication server. 

64. A method of charging for ad/ertising on the Web, comprising: 
determining link trafversais leading to a page; and 
charging for advising/based on link traversals to the page. 
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65. 



66. 




68. 
69. 

70. 
71. 
72. 
73. 



The method of Claim 64, wherein charging for advertising is based on the number of link 
traversals from an advertising pagp to a product page. 



The method of Clairn 64, wh/mn charging for advertising is based on the number of 
sales resulting fram a path including an advertising page. 

A method of processing a service request^frmn a client to a server system through a 
network, said method comprising tlje^steps of: 

forwarding a service rp^uest from the client to the server system, wherein 
communications betweejHhe client and server system are according to hypertext transfer 
protocol, and wherpin the service request includes a session identifier designated by the 
server system:/^ 

validating, at the server system, the session identifier; and 
✓returning a controlled document if the session identifier is valid. 

The method of Claim 67 wherein the session identifier is cryptographically generated. 

The method of Claim 67 wherein the session identifier is directed to an accessible 
domain. 

The method of Claim 67 wherein the session identifier comprises an expiration time. 

The method of Claim 67 wherein the session identifier comprises a date. 

The method of Claim 67 wherein the session identifier comprises a key identifier. 

The method of Claim 67 wherein the session identifier comprises an address of the client. 




74. 



The method of Claim 67 wherein the session identifier comprises an unforgeable digital 
signature. 
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75. The method of Claim 67 wherein the session identifier facilitates authenticated accesses 
across multiple content servers. 

76. The method of Claim 67 wherein the document is customized for a particular user based 
on a user identification of the session identifier. 

77. The method of Claim 67, wherein the session identifier is appended to at least one path 
name in a document returned by the server system. 

78. The method of Claim 77 wherein the step of appending the session identifier comprises 
filtering the requested document. 



79. 



4 




A method of processing service requests from a client to a server system through a 
network, j aid method comprising the steps of: 

foi warding a service request from the client to the server system, wherein 
communications between the client and server system are according to hypertext transfer 
protocol; 

re urning a session identifier from the server system to the client; and 

ap sending as part of a path name in a uniform resource locator the session 

identifier ;o subsequent service requests from the client to the server system within a 

session oi requests. 

80. The method of Claim 79 wherein the session identifier is cryptographically generated. 

81 . The method of Claim 79 further comprising: 
returning a REDIRECT to the client, the REDIRECT containing a locator for an 

authentication server, the authentication server providing the session identifier. 



82. 



The method of Claim 79, wherein the session identifier is appended to at least one path 
name in a document returned by the server system. 
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83. The method of Claim 82, wherein the at least one path name is in a link in the returned 
document. 

84. The method of Claim 83 wherein the link is an absolute link. 

85. The method of Claim 83 wherein the link comprises a uniform resource locator. 

86. The method of Claim 82 wherein the step of appending the session identifier comprises 
filtering the requested document. 

87. The method of Claim 82 wherein the session identifier is cryptographically generated. 

88. The method of Claim 82 wherein the session identifier is directed to an accessible 
domain. 

89. The method of Claim 82 wherein the session identifier comprises an expiration time. 

90. The method of Claim 82 wherein the session identifier comprises a date. 

91 . The method of Claim 82 wherein the session identifier comprises a key identifier. 

92. The method of Claim 82 wherein the session identifier comprises an address of the client. 

93. The method of Claim 82 wherein the session identifier comprises an unforgeable digital 
signature. 

94. A method of evaluating the effectiveness of advertising on the Web, comprising: 

determining link travpfsals leading from an advertisement to a page; and 
measuring the nrnzfoer of s^s resulting from link traversals from the 
advertisement to the p^ge. / ^ — y 

95. A method of evaluating the effectiveness of advertising on the Web, comprising: 



